Analysis
-
max time kernel
4294203s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20220311-en -
submitted
19-03-2022 14:53
General
-
Target
bcccb14658e8c1bee8107a2c314957c2bd9e505e73012b0aaa18df9fedf99248.exe
-
Size
573KB
-
MD5
dd0c5c4d2cdf6f57be6c7f4d7e64f5fd
-
SHA1
032aa1d1eb4d30364bc89d88121a6ef4d645661d
-
SHA256
bcccb14658e8c1bee8107a2c314957c2bd9e505e73012b0aaa18df9fedf99248
-
SHA512
ba34a2a91f6530dd93d4a705aad982c4ad5b004ff7023d5e10e2c84e38dbbf2e89ab2d9541beaf60ddfa42cd31d56f2e5fdf3633fe75a248432e6d74002cee34
Score
10/10
Malware Config
Signatures
-
Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
-
BazarBackdoor
Stealthy backdoor targeting corporate networks, believed to be developed by Trickbot's authors.
-
Bazar/Team9 Backdoor payload 3 IoCs
-
Bazar/Team9 Loader payload 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bcccb14658e8c1bee8107a2c314957c2bd9e505e73012b0aaa18df9fedf99248.exe"C:\Users\Admin\AppData\Local\Temp\bcccb14658e8c1bee8107a2c314957c2bd9e505e73012b0aaa18df9fedf99248.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
356KB
-
Filesize
352KB
-
Filesize
344KB